In the last decade, millions of people have used the Web to communicate and conduct business with their customers. This includes the use of web-based apps that store and collect data such as customer data submitted through content management systems, shopping carts, inquiry or submit forms and login fields.
Since these applications are online-based and often accessed from anywhere in the world they are at risk for hacking attempts to exploit weaknesses in the application or its supporting infrastructure. SQL injection attacks which exploit weaknesses within databases, could compromise databases that contain sensitive data. Attackers may also use a foothold gained by breaching a Web application to discover and access other, more vulnerable systems on your network.
Other typical Web attacks include Cross Site Scripting attacks (XSS), which exploit vulnerabilities in the web server to inject malicious code into web pages, which executes as an infected code in the victim’s browser. This lets attackers steal confidential information or redirect the user to websites that offer phishing. Web forums, message boards, and blogs are especially vulnerable to XSS attacks.
Hackers collaborate to overwhelm websites by sending more requests than the website can handle. This could cause the site to slow down or even shut down completely, which interferes with the ability of the site to process requests and make it unusable for everyone. This is the reason DDoS attacks are especially devastating for small businesses that rely on their websites for operations for their business, such as local restaurants or bakeries.
http://neoerudition.net/5-cybersecurity-protocols-that-your-cybersecurity-engineer-should-apply
